[NaveCohenMonday]

Summary

Publish the complete OpenShell 0.0.116-globster.11 compatibility set from the merged volume-permission fix in #33. The release pins source commit cecbea8459b9abb12ea25af5c0ca3d5e6639576c and its exact tree; initialized workspace volumes retain helper file groups across Kubernetes storage refreshes.

Task-ID: none

Release-only follow-up to Task 33.09.06 and #33. Implementation completion belongs to #33; this PR updates only the established publication pins. Staging import and adoption remain separate, and production is unchanged.

Related Issue

No issue required: mechanical release pin update for the reviewed and merged fix in #33.

Changes

• Advance the cargo/chart version to 0.0.116-globster.11 and image tag to 0.0.116-globster-cecbea84.
• Pin every reusable build workflow and source checkout to the same merged revision.
• Preserve immutable publication, provenance verification and complete-set receipt handling.

Testing

• mise run pre-commit passed. Full local mise run ci was attempted and hit the same cached Go SDK lint failure documented in fix(kubernetes): preserve initialized volume permissions (task 33.09.06) #33; remote Go SDK checks cover the clean checkout.
• Source SHA/tree verification passed.
• Rendered Helm chart lint, package and verification round trip passed.
• Source PR fix(kubernetes): preserve initialized volume permissions (task 33.09.06) #33 passed Branch Checks on all three Rust platforms, Helm Lint and security checks.
• Actual Azure SAN proof retained with Task 33.09.06: three refreshes preserved helper groups with OnRootMismatch; the Always control reset groups within 20 seconds.

Checklist

• Conventional commit and DCO sign-off.
• No runtime behavior beyond the separately reviewed source fix.